← Back

CVE-2026-86492

nvd nist
Published: Sep 7, 2026Modified: Sep 8, 2026Deferred

JSON object

Loading...
8.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Exploitability: 3.1 / Impact: 4.7
Source: cve@jetbrains.com (Secondary)

Description

In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens

Related CWEs

CWE-488
Exposure of Data Element to Wrong Session
The product does not sufficiently enforce boundaries between the states of different sessions, causing data to be provided to, or used by, the wrong session.

References (1)

Source: cve@jetbrains.com

Timeline

No history available yet.